Forum PHP.pl

[PHP] pobierz, plaintext 
<?php
 
require_once "../silnik.php";
require_once "../ustawienia/szablon/naglowek.php";
 
if (isset($_GET['status']) && !isset($message)) {
	if ($_GET['status'] == "sn") {
		$message = "Dodano dodatkową stronę.<br />Adres URL do tej strony to: \n";
		$message .= "<a href='".BASEDIR."viewpage.php?page_id=".intval($_GET['pid'])."'>viewpage.php?page_id=".intval($_GET['pid'])."</a>\n";
	} elseif ($_GET['status'] == "su") {
		$message = "Zaktualizowano dodatkową stronę.<br />Adres URL do tej strony to: \n";
		$message .= "<a href='".BASEDIR."viewpage.php?page_id=".intval($_GET['pid'])."'>viewpage.php?page_id=".intval($_GET['pid'])."</a>\n";
	} elseif ($_GET['status'] == "del") {
		$message = "Usunięto dodatkową stronę.";
	}
	if ($message) {
		$message = "<div class='admin-message'>".$message."</div>";
		if ($_GET['status'] == "sn" || $_GET['status'] == "su") {
			echo $message;
		} else {
			echo "<div id='close-message'>".$message."</div>\n";
		}
	}
}
 
function stripinput($text) {
	if (!is_array($text)) {
		$text = stripslash(trim($text));
		$search = array("&", "\"", "'", "\\", '\"', "\'", "<", ">", "&nbsp;");
		$replace = array("&amp;", "&quot;", "'", "\", "&quot;", "'", "&lt;", "&gt;", " ");
		$text = preg_replace("/(&amp;)+(?=\#([0-9]{2,3});)/i", "&", str_replace($search, $replace, $text));
	} else {
		foreach ($text as $key => $value) {
			$text[$key] = stripinput($value);
		}
	}
	return $text;
}
function addslash($text) {
	if (!QUOTES_GPC) {
		$text = addslashes(addslashes($text));
	} else {
		$text = addslashes($text);
	}
	return $text;
}
function phpentities($text) {
	$search = array("&", "\"", "'", "\\", "<", ">");
	$replace = array("&amp;", "&quot;", "'", "\", "&lt;", "&gt;");
	$text = str_replace($search, $replace, $text);
	return $text;
}
 
if (isset($_POST['save'])) {
	$page_title = stripinput($_POST['page_title']);
	$page_content = addslash($_POST['page_content']);
		if (isset($_POST['page_id']) && isnum($_POST['page_id'])) {
			$result = mysql_query("UPDATE ".DB_PREFIX."podstrona SET page_title='".$page_title."', page_content='".$page_content."' WHERE page_id='".$_POST['page_id']."'");
		} else {
			$result = mysql_query("INSERT INTO ".DB_PREFIX."podstrona (page_title, page_content) VALUES ('".$page_title."', '".$page_content."')");
			$page_id = mysql_insert_id();
			if (isset($_POST['add_link'])) {
				$data = @mysql_fetch_assoc(mysql_query("SELECT link_order FROM ".DB_SITE_LINKS." ORDER BY link_order DESC LIMIT 1"));
				$link_order = $data['link_order'] + 1;
				$result = mysql_query("INSERT INTO ".DB_SITE_LINKS." (link_name, link_url, link_visibility, link_position, link_window, link_order) VALUES ('".$page_title."', 'viewpage.php?page_id=".$page_id."', '".$page_access."', '1', '0', '".$link_order."')");
			}
		}
	if (isset($_POST['page_id']) && isnum($_POST['page_id'])) {
	header("Location: ".FUSION_SELF."?status=su&pid=".$_POST['page_id']);
	} else {
	header("Location: ".FUSION_SELF."?status=sn&pid=".$page_id);
	}
} else if (isset($_POST['delete']) && (isset($_POST['page_id']) && isnum($_POST['page_id']))) {
	$result = mysql_query("DELETE FROM ".DB_PREFIX."podstrona WHERE page_id='".$_POST['page_id']."'");
	$result = mysql_query("DELETE FROM ".DB_SITE_LINKS." WHERE link_url='viewpage.php?page_id=".$_POST['page_id']."'");
	header("Location: ".FUSION_SELF."?status=del");
} else {
	if (isset($_POST['preview'])) {
		$addlink = isset($_POST['add_link']) ? " checked='checked'" : "";
		$page_title = stripinput($_POST['page_title']);
		$page_content = stripslash($_POST['page_content']);
		$page_content = phpentities($page_content);
	}
	$result = mysql_query("SELECT page_id, page_title FROM ".DB_PREFIX."podstrona ORDER BY page_title");
	if (@mysql_num_rows($result) != 0) {
		$editlist = ""; $sel = "";
		while ($data = @mysql_fetch_assoc($result)) {
			if (isset($_POST['page_id'])) { $sel = ($_POST['page_id'] == $data['page_id'] ? " selected='selected'" : ""); }
			$editlist .= "<option value='".$data['page_id']."'$sel>[".$data['page_id']."] ".$data['page_title']."</option>\n";
		}
		opentable("Istniejące dodatkowe strony");
		echo "<div style='text-align:center'>\n<form name='selectform' method='post' action='".FUSION_SELF."'>\n";
		echo "<select name='page_id' class='textbox' style='width:200px;'>\n".$editlist."</select>\n";
		echo "<input type='submit' name='edit' value='Edytuj' />\n";
		echo "<input type='submit' name='delete' value='Usuń' onclick='return DeletePage();' />\n";
		echo "</form>\n</div>\n";
		closetable();
	}
 
	if (isset($_POST['edit']) && (isset($_POST['page_id']) && isnum($_POST['page_id']))) {
		$result = mysql_query("SELECT page_id, page_title, page_content FROM ".DB_PREFIX."podstrona WHERE page_id='".$_POST['page_id']."' LIMIT 1");
		if (@mysql_num_rows($result)) {
			$data = @mysql_fetch_assoc($result);
			$page_title = $data['page_title'];
			$page_content = phpentities(stripslashes($data['page_content']));
			$addlink = "";
		} else {
			header("Location: podstrona.php");
		}
	}
	if (isset($_POST['page_id']) && isnum($_POST['page_id'])) {
		opentable("Edytuj dodatkową stronę : [".$_POST['page_id']."] ".$page_title);
	} else {
		if (!isset($_POST['preview'])) {
			$page_title = "";
			$page_content = "";
			$addlink = "";
		}
		opentable("Dodaj dodatkową stronę");
	}
	echo "<form name='inputform' method='post' action='".FUSION_SELF."' onsubmit='return ValidateForm(this);'>\n";
	echo "<table cellpadding='0' cellspacing='0' class='center'>\n<tr>\n";
	echo "<td width='100' class='tbl'>Tytuł strony:</td>\n";
	echo "<td width='80%' class='tbl'><input type='text' name='page_title' value='".$page_title."' class='textbox' style='width:250px;' />\n";
	echo "</tr>\n<tr>\n";
	echo "<td valign='top' width='100' class='tbl'>Zawartość strony:</td>\n";
	echo "<td width='80%' class='tbl'><textarea name='page_content' cols='95' rows='15' style='width:98%'>".$page_content."</textarea></td>\n";
	echo "</tr>\n<tr>\n";
	echo "<td align='center' colspan='2' class='tbl'><br />\n";
	if (isset($_POST['page_id']) && isnum($_POST['page_id'])) {
		echo "<input type='hidden' name='page_id' value='".$_POST['page_id']."' />\n";
	}
	echo "<input type='submit' name='save' value='Zachowaj' /></td>\n";
	echo "</tr>\n</table>\n</form>\n";
	closetable();
	echo "<script type='text/javascript'>\n"."function DeletePage() {\n";
	echo "return confirm('Usunąć dodatkową stronę?');\n}"."\n";
	echo "function ValidateForm(frm) {\n"."if(frm.page_title.value=='') {\n";
	echo "alert('Wpisz tytuł strony');\n"."return false;\n}\n";
	/*if ($ustawienia['tinymce']) {
		echo "function SetTinyMCE(val) {\n";
		echo "now=new Date();\n"."now.setTime(now.getTime()+1000*60*60*24*365);\n";
		echo "expire=(now.toGMTString());\n"."document.cookie=\"custom_pages_tinymce=\"+escape(val)+\";expires=\"+expire;\n";
		echo "location.href='".FUSION_SELF."';\n"."}\n";
	}*/
	echo "</script>\n";
}
 
require_once "../ustawienia/szablon/stopka.php";
?>
[PHP] pobierz, plaintext 

[PHP] pobierz, plaintext 
$replace = array("&", """, "'", "\", """, "'", "<", ">", " ");
[PHP] pobierz, plaintext 

[PHP] pobierz, plaintext 
$replace = array("&", """, "'", "\\", """, "'", "<", ">", " ");
[PHP] pobierz, plaintext 

[PHP] pobierz, plaintext 
$replace = array("&", """, "'", "\\", """, "'", "<", ">", " ");
[PHP] pobierz, plaintext 

[PHP] pobierz, plaintext 
$replace = array("&", """, "'", "\\", "<", ">");
[PHP] pobierz, plaintext 

[HTML] pobierz, plaintext 
<!-- TinyMCE -->
<script type="text/javascript" src="../jscripts/tiny_mce/tiny_mce.js"></script>
<script type="text/javascript">
	tinyMCE.init({
		// General options
		mode : "textareas",
		theme : "advanced",
		plugins : "autolink,lists,pagebreak,style,layer,table,save,advhr,advimage,advlink,emot
ions,iespell,inlinepopups,insertdatetime,preview,media,searchreplace,print,contex
tmenu,paste,directionality,fullscreen,noneditable,visualchars,nonbreaking,xhtmlxt
ras,template,wordcount,advlist,autosave",
 
		// Theme options
		theme_advanced_buttons1 : "save,newdocument,|,bold,italic,underline,strikethrough,|,justifyleft,justif
ycenter,justifyright,justifyfull,styleselect,formatselect,fontselect,fontsizesele
ct",
		theme_advanced_buttons2 : "cut,copy,paste,pastetext,pasteword,|,search,replace,|,bullist,numlist,|,out
dent,indent,blockquote,|,undo,redo,|,link,unlink,anchor,image,cleanup,help,code,|
,insertdate,inserttime,preview,|,forecolor,backcolor",
		theme_advanced_buttons3 : "tablecontrols,|,hr,removeformat,visualaid,|,sub,sup,|,charmap,emotions,iesp
ell,media,advhr,|,print,|,ltr,rtl,|,fullscreen",
		theme_advanced_buttons4 : "insertlayer,moveforward,movebackward,absolute,|,styleprops,|,cite,abbr,acro
nym,del,ins,attribs,|,visualchars,nonbreaking,template,pagebreak,restoredraft",
		theme_advanced_toolbar_location : "top",
		theme_advanced_toolbar_align : "left",
		theme_advanced_statusbar_location : "bottom",
		theme_advanced_resizing : true,
 
		// Example content CSS (should be your site CSS)
		content_css : "css/content.css",
 
		// Drop lists for link/image/media/template dialogs
		template_external_list_url : "lists/template_list.js",
		external_link_list_url : "lists/link_list.js",
		external_image_list_url : "lists/image_list.js",
		media_external_list_url : "lists/media_list.js",
 
		// Style formats
		style_formats : [
			{title : 'Bold text', inline : 'b'},
			{title : 'Red text', inline : 'span', styles : {color : '#ff0000'}},
			{title : 'Red header', block : 'h1', styles : {color : '#ff0000'}},
			{title : 'Example 1', inline : 'span', classes : 'example1'},
			{title : 'Example 2', inline : 'span', classes : 'example2'},
			{title : 'Table styles'},
			{title : 'Table row 1', selector : 'tr', classes : 'tablerow1'}
		],
 
		// Replace values for the template plugin
		template_replace_values : {
			username : "Some User",
			staffid : "991234"
		}
	});
</script>
<!-- /TinyMCE -->
[HTML] pobierz, plaintext